Sr. Information Systems Security Officer (ISSO)

V2X, Inc.; Ridgecrest (CA); On-site; USD 120,000 - 180,000; Full time

Job summary

V2X, Inc. is seeking an Advanced ISSO to direct development and enforcement of security policies and vulnerability management. The role includes RMF compliance advisory and mentoring junior staff in a DoD-focused environment.

The candidate will oversee continuous monitoring, DISA STIG configurations, and authorization documentation for system interconnections. Top Secret clearance and extensive IA/Cyber experience are required.

Qualifications

• CompTIA Security+ is required.
• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or related field; 10 years of DoD security experience with baseline certs allowed in lieu of degree.
• Active Top Secret clearance is required.
• 10 years of engineering experience, including at least 5 years in IA/Cybersecurity.
• RMF experience per DoDI 8510.01.
• Experience applying CNSSI 1253, NIST SP 800-53, and JSIG.
• Experience using ACAS, DISA STIGs, and SCAP Checker for vulnerability assessments.
• Experience deploying DISA STIG configurations across OS and network devices.

Responsibilities

• Lead development, implementation, and enforcement of cybersecurity policies, standards, and methodologies.
• Direct vulnerability management using ACAS, DISA STIGs, and SCAP Checker.
• Ensure secure configuration of OS and network devices per DISA STIGs.
• Oversee continuous monitoring, security audits, and risk mitigation.
• Provide SME on NIAP/Common Criteria and DISA APL compliance.
• Prepare certification letters, MOAs, and authorization docs for interconnections.
• Advise leadership on RMF compliance and cybersecurity best practices.

Skills

RMF

Vulnerability management

Policy development

Mentoring

Risk management

Education

Bachelor's degree in IT/Cybersecurity/CS

DoD baseline certs (CISM/CISSP/FITSP-M/GCIH)

Active Top Secret clearance

Tools

ACAS

DISA STIGs

SCAP Compliance Checker

Job description

Overview

Working across the globe, V2X builds smart solutions designed to integrate physical and digital infrastructure from base to battlefield. We bring 120 years of successful mission support to improve security, streamline logistics, and enhance readiness. Aligned around a shared purpose, our $4.5B company and 16,000 people work alongside our clients, here and abroad, to tackle their most complex challenges with integrity, respect, responsibility, and professionalism.

We are seeking an Advanced ISSO to direct the development, implementation, and enforcement of security policies and vulnerability management activities using tools like ACAS and DISA STIGs. In this role, you will manage continuous monitoring, advise leadership on Risk Management Framework (RMF) compliance, and mentor junior team members.

Responsibilities

• Lead the development, implementation, and enforcement of cybersecurity policies, standards, and methodologies.
• Direct vulnerability management activities using ACAS, DISA STIGs, and SCAP Compliance Checker.
• Oversee secure configuration of operating systems and network devices in accordance with DISA STIG requirements.
• Manage continuous monitoring efforts, conduct security audits, and drive risk mitigation strategies.
• Provide subject matter expertise on NIAP/Common Criteria certifications and DISA Approved Products List (APL) compliance.
• Prepare and review authorization documentation, certification letters, and MOAs for system interconnections.
• Advise program leadership, system owners, and engineers on RMF compliance and cybersecurity best practices.

Qualifications

Education / Certifications:

• CompTIA Security + is required
• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or related area of study is required. In lieu of a bachelor's degree, candidates must have 10 years of information system security officer / cybersecurity engineering experience in addition to a DoD approved baseline certification (CISM, CISSP, FITSP-M, GCIH, etc.) as defined by DoDD 8140-M.
• An active Top Secret clearance is required.

Experience:

• 10 years of engineering experience, including at least 5 years in Information Assurance/Cybersecurity (IA/CS).
• Demonstrated experience implementing the Risk Management Framework (RMF) in accordance with DoDI 8510.01.
• Extensive experience applying security controls outlined in CNSSI 1253, NIST SP 800-53, and JSIG.
• Able to conduct vulnerability assessments using ACAS, DISA STIGs, and SCAP Compliance Checker with automated benchmarks.
• Proven experience implementing DISA STIG configurations across operating systems and network devices.
• In-depth knowledge of continuous monitoring, security audits, risk assessments, and mitigation planning for DoD systems.
• Experience evaluating NIAP/Common Criteria technologies and the DISA Approved Products List (APL).
• Background preparing certification letters, MOAs, and authorization documentation for system interconnections.
• Experience developing IA-related acquisition documentation.
• Familiarity with Intelligence Community Directive (ICD) 705, DoDD 5205.07, and DOD 5205.07-M Volumes 1-4.
• Comfortable mentoring and guiding more junior teammates.

At V2X, we are deeply committed to both equal employment opportunity, including protection for Veterans and individuals with disabilities, and fostering an inclusive and diverse workplace. We ensure all individuals are treated with fairness, respect, and dignity, recognizing the strength that comes from a workforce rich in diverse experiences, perspectives, and skills. This commitment, aligned with our core Vision and Values of Integrity, Respect, and Responsibility, allows us to leverage differences, encourage innovation, and expand our success in the global marketplace, ultimately enabling us to best serve our clients. #LI-SL1